Red Hat Product Errata RHSA-2026:16777 - Security Advisory Issued: 2026-05-13 Updated: 2026-05-13 RHSA-2026:16777 - Security Advisory Overview Updated Packages Synopsis Moderate: freerdp security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952) freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986) freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951) freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775) freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885) freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884) freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883) FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2442768 - CVE-2026-25952 freerdp: FreeRDP: Denial of service due to use-after-free vulnerability BZ - 2442782 - CVE-2026-26986 freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect BZ - 2442783 - CVE-2026-27951 freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity BZ - 2447379 - CVE-2026-29775 freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId BZ - 2447383 - CVE-2026-31885 freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks BZ - 2447385 - CVE-2026-31884 freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 BZ - 2447386 - CVE-2026-31883 freerdp: FreeRDP: Denial of Service via crafted audio data in RDP BZ - 2453217 - CVE-2026-33985 FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read CVEs CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM freerdp-2.2.0-12.el8_8.8.src.rpm SHA-256: ecadb3048a77d780ef904331167358792249f0f25e21cb40e1596ae1b4fe1f87 x86_64 freerdp-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: abbbba937915d7361e2433b821e3efab8c5b1ca782fbeabfe3db694151cce685 freerdp-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: 5b31cee6e398ffaa307da02935da27a5b1596056642f7cc2f9bb800d8364f9de freerdp-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 9e9808ea201fcd899a74cddc503b531d4bf7691ba1175236c3ca4037dae539fd freerdp-debugsource-2.2.0-12.el8_8.8.i686.rpm SHA-256: 3178b77b0532cf57265b64943763d27d752b06d68195dc6ce3f02329acc8e6e9 freerdp-debugsource-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: bf5ee1d9b14f9a1f4e79556da3b14102ff53119db246dc419ad3c31f72c52a2e freerdp-libs-2.2.0-12.el8_8.8.i686.rpm SHA-256: 4f897fceb649dc851daa536cdec1926f40960ee015d1a78611b40b2a13b0d3d5 freerdp-libs-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 98e04f23ce164a8ec0995f922012084e142b01189129cb52bef5ee16a6876622 freerdp-libs-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: c32e9e6402b46530718b8e4d5c9419b953c8486fd74fa6fd59961f96d655e33b freerdp-libs-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 5605666046dc0fba40ed9b2132e3dfd0478f14e1ddcf9bfc72c1e3495eade6ed libwinpr-2.2.0-12.el8_8.8.i686.rpm SHA-256: e15a43931ae24861884361ff5c3a5eefce6010aece09965f83be83ad15b7f1f1 libwinpr-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 417574ad8ae1b3eadd0f2e801ab85e1c12dbc450f7c355efe5e793ee3b96e4de libwinpr-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: 9e6703b69e75fde491a519f670f4e6312918c1848f3a83efcd3e50a1808daea2 libwinpr-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: bdb95afc1572aed870fc7407e4dcb533dd55c29d2c416b0f6623987b0fb28eb6 libwinpr-devel-2.2.0-12.el8_8.8.i686.rpm SHA-256: fa07a08041acf1a1a67d5ae82cb0c72c26d9d979f176037d15ab8e5caae2f705 libwinpr-devel-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 02d876c6570e634d37b42935b764ebbe84b081fc9aa4d8061d1b73fc9388644e Red Hat Enterprise Linux Server - TUS 8.8 SRPM freerdp-2.2.0-12.el8_8.8.src.rpm SHA-256: ecadb3048a77d780ef904331167358792249f0f25e21cb40e1596ae1b4fe1f87 x86_64 freerdp-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: abbbba937915d7361e2433b821e3efab8c5b1ca782fbeabfe3db694151cce685 freerdp-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: 5b31cee6e398ffaa307da02935da27a5b1596056642f7cc2f9bb800d8364f9de freerdp-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 9e9808ea201fcd899a74cddc503b531d4bf7691ba1175236c3ca4037dae539fd freerdp-debugsource-2.2.0-12.el8_8.8.i686.rpm SHA-256: 3178b77b0532cf57265b64943763d27d752b06d68195dc6ce3f02329acc8e6e9 freerdp-debugsource-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: bf5ee1d9b14f9a1f4e79556da3b14102ff53119db246dc419ad3c31f72c52a2e freerdp-libs-2.2.0-12.el8_8.8.i686.rpm SHA-256: 4f897fceb649dc851daa536cdec1926f40960ee015d1a78611b40b2a13b0d3d5 freerdp-libs-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 98e04f23ce164a8ec0995f922012084e142b01189129cb52bef5ee16a6876622 freerdp-libs-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: c32e9e6402b46530718b8e4d5c9419b953c8486fd74fa6fd59961f96d655e33b freerdp-libs-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 5605666046dc0fba40ed9b2132e3dfd0478f14e1ddcf9bfc72c1e3495eade6ed libwinpr-2.2.0-12.el8_8.8.i686.rpm SHA-256: e15a43931ae24861884361ff5c3a5eefce6010aece09965f83be83ad15b7f1f1 libwinpr-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 417574ad8ae1b3eadd0f2e801ab85e1c12dbc450f7c355efe5e793ee3b96e4de libwinpr-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: 9e6703b69e75fde491a519f670f4e6312918c1848f3a83efcd3e50a1808daea2 libwinpr-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: bdb95afc1572aed870fc7407e4dcb533dd55c29d2c416b0f6623987b0fb28eb6 libwinpr-devel-2.2.0-12.el8_8.8.i686.rpm SHA-256: fa07a08041acf1a1a67d5ae82cb0c72c26d9d979f176037d15ab8e5caae2f705 libwinpr-devel-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 02d876c6570e634d37b42935b764ebbe84b081fc9aa4d8061d1b73fc9388644e Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM freerdp-2.2.0-12.el8_8.8.src.rpm SHA-256: ecadb3048a77d780ef904331167358792249f0f25e21cb40e1596ae1b4fe1f87 ppc64le freerdp-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 030a459cd0466e4f9ea999d3ef94b77999e4d081d4c956970bcaa83dce78c435 freerdp-debuginfo-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 20b9fafcd0116acc6c6529c2138ecc042850a3885b05802880c9855e932ab5f3 freerdp-debugsource-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 1536a7d7c652bc1aa7e22771ea084c014ebb96b78d4d7170e94b69320ed39c1b freerdp-libs-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: baedc99943e71ac61883ba89b4b53a18980c552e0682b838eedce23f8b500583 freerdp-libs-debuginfo-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 5a362bac4b63ebd68827a1dff4c34eef552761fb886ef260cd4fe69bdf3e9bff libwinpr-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 89b098ee45f47c2c3c905200b9637380740be95d2aef7ed71586280a2b0ed484 libwinpr-debuginfo-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: 0770bc886f7088d269e3e573eb1450709fed4346a9eea48d2fdb50641c4321a0 libwinpr-devel-2.2.0-12.el8_8.8.ppc64le.rpm SHA-256: c7f72207efc845dcbe5271ac87ce59af57f5dec2eea69b3d4453f1112feb01ae Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM freerdp-2.2.0-12.el8_8.8.src.rpm SHA-256: ecadb3048a77d780ef904331167358792249f0f25e21cb40e1596ae1b4fe1f87 x86_64 freerdp-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: abbbba937915d7361e2433b821e3efab8c5b1ca782fbeabfe3db694151cce685 freerdp-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: 5b31cee6e398ffaa307da02935da27a5b1596056642f7cc2f9bb800d8364f9de freerdp-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 9e9808ea201fcd899a74cddc503b531d4bf7691ba1175236c3ca4037dae539fd freerdp-debugsource-2.2.0-12.el8_8.8.i686.rpm SHA-256: 3178b77b0532cf57265b64943763d27d752b06d68195dc6ce3f02329acc8e6e9 freerdp-debugsource-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: bf5ee1d9b14f9a1f4e79556da3b14102ff53119db246dc419ad3c31f72c52a2e freerdp-libs-2.2.0-12.el8_8.8.i686.rpm SHA-256: 4f897fceb649dc851daa536cdec1926f40960ee015d1a78611b40b2a13b0d3d5 freerdp-libs-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 98e04f23ce164a8ec0995f922012084e142b01189129cb52bef5ee16a6876622 freerdp-libs-debuginfo-2.2.0-12.el8_8.8.i686.rpm SHA-256: c32e9e6402b46530718b8e4d5c9419b953c8486fd74fa6fd59961f96d655e33b freerdp-libs-debuginfo-2.2.0-12.el8_8.8.x86_64.rpm SHA-256: 5605666046dc0fba40ed9b2132e3dfd0478f14e1ddcf9bfc72c1e3